How to Hire an Inpatient Coder: Credentials, Sourcing and Screening

An inpatient coder turns acute-care hospital records into ICD-10-CM diagnosis codes and ICD-10-PCS procedure codes. Under the Inpatient Prospective Payment System, a hospital receives a single payment per case based on the MS-DRG assigned at discharge — so this seat sits directly on your payment line. AAPC describes that skill set, ICD-10-CM and ICD-10-PCS coding for hospital inpatient services plus MS-DRG assignment rules, as what its Certified Inpatient Coder (CIC) credential validates.

Day-one competence starts with the record itself. MS-DRG classification runs on the principal diagnosis plus up to 24 additional diagnoses and up to 25 procedures, and a few MS-DRGs also use age, sex and discharge status. Screen for a hire who reads the whole chart — history and physical, operative and procedure notes, consults and the discharge summary — rather than working from a problem list.

The habit that separates strong inpatient coders is knowing when to stop and ask. O*NET's task list for medical records specialists includes resolving or clarifying codes or diagnoses with conflicting, missing or unclear information by consulting doctors — in an inpatient seat, that means a provider query instead of a guess. AHIMA and ACDIS published their 'Guidelines for Achieving a Compliant Query Practice — 2026 Update' in August 2026, covering core query standards and the role of AI and automated tools in documentation clarification. The query practice your team trains against has a current published edition to point to.

Name your stack in the posting. O*NET lists 3M Encoder, AMA CodeManager and DRG grouping software among the categorization and classification software medical records specialists use, and inpatient candidates will tell you which encoder and grouper they have lived in. The FY 2027 MS-DRG Grouper is Version 44, effective October 1, 2026 through March 31, 2027 — a working inpatient coder knows which grouper version is live.

Currency is part of the job, not a bonus. ICD-10-CM diagnosis codes and ICD-10-PCS procedure codes update every October 1, and ICD-10-PCS files also have an April 1 update window. CMS's FY2027 ICD-10-PCS codes are for discharges occurring from October 1, 2026 through March 31, 2027. Ask candidates how they handled the most recent October 1 code load — the answer tells you more about working habits than a certificate line.

If your applicant pool comes from professional-fee work, check the code-set match before the interview. AAPC describes its CPC as validating coding across outpatient and physician services — ICD-10-CM, CPT and HCPCS Level II — so pro-fee strength does not by itself demonstrate ICD-10-PCS facility experience. The candidate-side view of the job, from training routes to daily work, belongs to our career guide on what an inpatient coder does.

Certification is a hiring standard you set, and the federal description of the occupation treats it that way. BLS says medical records specialists typically need a postsecondary certificate to enter the occupation, although some qualify with a high school diploma, and that certification may be required or preferred. BLS also says employers may prefer to hire certified applicants, or expect applicants to earn certification shortly after being hired.

Two credentials speak directly to the inpatient seat. AHIMA describes its Certified Coding Specialist (CCS) as demonstrating tested skills in data quality and accuracy and mastery of coding proficiency, and requires CCS holders to complete CEUs and pay a recertification fee over each two-year certification period. AAPC describes its Certified Inpatient Coder (CIC) as validating ICD-10-CM and ICD-10-PCS coding for hospital inpatient services and MS-DRG assignment rules — the credential of the two scoped to the hospital inpatient setting.

RHIT and RHIA tell you something different. AHIMA's RHIT exam generally requires completing the associate-degree academic requirements of a CAHIIM-accredited health information management program, and the RHIA generally requires a CAHIIM-accredited program at the baccalaureate or master's level. AHIMA describes RHIAs as managing people and operational units and helping prepare budgets — useful signals if the hire could grow into a supervisory seat, while the CCS and CIC speak to coding proficiency itself.

Whatever you require, write it into the posting as a requirement of the role at your organization, and verify the credential at the issuing body before the offer. AHIMA lets employers confirm that credentials are current using the person's last name plus the credential number or AHIMA ID; the screening section below covers both bodies' lookup tools.

Verify before you post: credential and exam rules change — eligibility routes, code-book editions and renewal terms among them. Confirm current CCS details with AHIMA and current CIC details with AAPC before a requirement reaches your job posting.

Start with the market you are hiring into. Medical records specialists — the occupation that counts coders alongside records staff who do not code — held about 200,700 jobs in 2025. BLS's largest employer groups were hospitals (28%), offices of physicians (18%), professional, scientific and technical services (10%), administrative and support services (8%) and management of companies (7%). That mix shows who else hires from this occupation.

The occupation is also growing. BLS projects employment of medical records specialists to grow 7.8%, to 216,300 by 2035, with about 14,000 openings per year on average — openings across the whole occupation, not inpatient seats alone.

The pool is thin in a measurable way. In an AHIMA-commissioned NORC survey of about 2,500 health information professionals (fielded August 2023, released November 1, 2023), 66% reported persistent staffing shortages over the past two years and 83% saw unfilled health information positions increase or persist over the past year. A limited local talent pool ranked among the top-three recruiting issues for 53% of respondents, local pay constraints for 59%, and salaries not competitive with remote jobs elsewhere for 51%.

Source where credentialed coders already gather. AAPC says its members have access to nearly 400 local chapters that collectively host over 3,000 events per year, and lists finding or sharing job opportunities as a chapter benefit. AHIMA is a federation of state-level Component Associations, with state associations such as CHIA in California and NYHIMA in New York. For channel-by-channel trade-offs, our guide to where to post billing and coding jobs compares the options.

Remote sourcing widens the net past your commute radius — in the same NORC survey, 40% of respondents said their organization increased its number of remote workers while addressing recruitment problems. It also helps to see the market from the candidate's side: the inpatient coder jobs on this board show how competing employers describe shift expectations, systems and credential requirements — a free benchmark before you write your own posting.

Verify the credential at the issuing body — never from a certificate image or a résumé line. AHIMA verifies that credentials are current using the person's last name plus the credential number or AHIMA ID. AAPC's online tool checks a member's credentials from the member ID and last name, or email and last name, and returns the credential, earned date, renewal date and status. Ask for the identifier during your application process so the lookup is not the bottleneck.

Read the tool's terms before you build a workflow on it. AAPC's verification is for verifying an individual's credentials only — compiling data or other commercial use is prohibited — and AAPC cannot guarantee absolute accuracy, so confirm the identifier belongs to the person you are checking. Our guide to verifying credentials before you hire walks through the AAPC lookup.

Then test the work, not the interview polish. A work sample built from a de-identified inpatient record — coded against the current ICD-10-CM and ICD-10-PCS guidelines and run through your grouper — shows you the finished product, not just the claim to have it. Give every finalist the same exercise and score it on the same rubric. AAPC also markets Practicode Team Assessments to employers for evaluating candidates and staff on standardized real-world coding cases across 19+ specialties, tracking accuracy and speed — one structured option, described by AAPC itself. Our guide to testing coders before you hire covers the setup.

Scenario questions carry the rest. Ask how the candidate handled a discharge summary that conflicted with the operative note. The O*NET task is resolving or clarifying codes or diagnoses with conflicting, missing or unclear information by consulting doctors — so listen for a query to the provider rather than a guess. Ask which grouper version was live on their last inpatient job (Version 44 took effect October 1, 2026 for FY 2027) and how they managed the most recent October 1 code load.

This seat carries compliance weight because its output is payment. A hospital receives a single IPPS payment per case based on the MS-DRG assigned at discharge, so the codes your inpatient coder assigns are the basis of the check. That is why training, audits and exclusion screening recur across OIG's guidance for coding operations.

Start with the OIG's List of Excluded Individuals/Entities (LEIE). OIG says entities should check the LEIE before employing or contracting with individuals and periodically afterward, and because OIG updates the list monthly, screening each month best minimizes potential overpayment and civil monetary penalty liability. OIG's General Compliance Program Guidance, which OIG publishes as voluntary, nonbinding guidance, lists monthly screening of the LEIE and state Medicaid exclusion lists among its examples of routine compliance monitoring.

The exposure is concrete. OIG states that anyone who hires an individual or entity on the LEIE may be subject to civil monetary penalties, and that health care entities should routinely check the list for new hires and current employees. OIG's exclusions FAQ adds that the ban applies regardless of who submits the claims and covers all administrative and management services the excluded person furnishes — language that reaches coding staff.

Two more pieces come from OIG's compliance guidance for billing operations. The 1998 guidance for third-party billing companies calls for a reasonable and prudent background investigation, including a reference check, and for the application to require disclosure of criminal convictions or exclusion actions. It applies this to new employees with discretionary authority over compliance-related decisions — written for billing companies, but the structure ports to any compliance-sensitive coding seat. The 2000 physician-practice guidance suggests a baseline audit and then periodic audits at least once a year, offering five or more medical records per federal payor or five to ten records per physician as a basic guide for a practice. A hospital sets its own audit sample against its own risk areas.

OIG's current General Compliance Program Guidance also recommends that claims reviews and audits include a review of medical necessity by an appropriately credentialed clinician. For inpatient records, that is the reviewer who can speak to whether the documentation supported the admission — a question that sits upstream of the DRG.

HIPAA training is the other duty that comes with the hire. The Privacy Rule requires a covered entity to train all members of its workforce on its PHI policies and procedures as necessary and appropriate for their functions. New workforce members must be trained within a reasonable period after joining — and the rule sets no fixed annual frequency. The training must be documented, and the Security Rule adds a security awareness and training program for all workforce members, including management.

On the query side, AHIMA and ACDIS published the 'Guidelines for Achieving a Compliant Query Practice — 2026 Update' in August 2026, covering core query standards and the role of AI and automated tools in documentation clarification. If your compliance program or interview scenarios still cite an earlier edition, that is a refresh worth making.

Verify before you rely on it: exclusion screening, HIPAA training and audit guidance belong to the OIG and HHS, and they change. Confirm your screening workflow, background-check process and training plan with your compliance advisor or health-care counsel, and check current requirements with the OIG and HHS before you rely on any summary here.

All three models work; they fail differently. In-house gives you the tightest oversight of a payment-critical seat. Remote widens the pool past your commute radius. Outsourcing converts a hiring problem into a vendor-oversight problem.

In-house coverage has a scheduling dimension. BLS says most medical records specialists work full time, and in always-open facilities such as hospitals they may work shifts that include nights or weekends. If your inpatient queue runs seven days a week, decide before you post whether the seat rotates through that coverage or holds business hours.

The remote datapoints come from the AHIMA/NORC survey: 40% of respondents said their organization increased its number of remote workers while addressing recruitment problems, and 21% named lack of remote or hybrid flexibility as the most impactful driver of turnover. If you hire remote, HIPAA's safeguards travel with the work — the Security Rule's workstation-use and physical-safeguard policies apply to all workstations that access ePHI, home workstations included, and its technical safeguards include unique user identification, automatic logoff, encryption and audit controls. Settle equipment, workspace and access policy before the first remote start date.

Outsourcing changes the paperwork more than the duties. HHS lists billing, claims processing and practice management among the activities that make a vendor a HIPAA business associate when PHI is involved, and BAAs must contain the elements in 45 CFR 164.504(e). A subcontractor that creates, receives, maintains or transmits PHI on your vendor's behalf is a business associate too. A BAA must be in place before PHI is disclosed to it — and since the HITECH Act and HHS's 2013 Omnibus final rule, business associates have been directly liable for certain HIPAA violations. Keep your own audit and query oversight even when the coding happens outside your building.

If a vendor codes from outside the U.S., the rules to check are specific. HHS says the HIPAA Rules contain no requirements specific to ePHI handled outside the United States. HHS also permits a covered entity or business associate to use a cloud provider that stores ePHI outside the U.S. when a BAA is in place and offshore risks are considered in the Security Rule risk analysis. Separately, the Medicaid statute bars states from making Medicaid payments for items or services to any entity located outside the United States — a payment rule, not a HIPAA provision — so read your payer contracts and state program rules with counsel.

If the decision spans your whole revenue-cycle staff rather than one coder seat, the hub guide to hiring billing and coding staff works the in-house, remote and outsourced question across every role. Whichever model you pick, the credential verification and exclusion screening steps above do not change — only who performs them does.

Retention starts with why coders leave. In the 2023 AHIMA/NORC survey, compensation was the top driver of health information turnover and burnout ranked second — 28% of respondents ranked burnout the second most impactful driver, while 41% in revenue-cycle vendor settings ranked it first. Lack of remote or hybrid flexibility was named the most impactful driver by 21%.

What organizations changed while addressing recruitment problems, by share of respondents: 45% said increased pay, 40% an increased number of remote workers, 28% increased training opportunities and 22% increased reliance on automation and machine learning, while 20% said their organization was taking no action. Training is the lever that compounds on this seat, because the code sets change every October, and ICD-10-PCS can change again in April.

Structure the first months deliberately. OIG's 2000 physician-practice guidance says new coding and billing staff should be trained as soon as possible and work under an experienced employee until training is complete — written for practices, but the pattern ports cleanly to a hospital coding team. Budget real training time each fall for the October 1 ICD-10 update and the new grouper year, and again for any April 1 ICD-10-PCS update.

Certification support is the other standing cost. AHIMA requires CCS holders to complete CEUs and pay a recertification fee over each two-year certification period — decide whether the employer carries that, and put the answer in writing at offer time.

Publish the ladder. BLS says medical records specialists may advance to health information technologist or medical and health services manager roles after completing a higher certification program or earning a degree in health information technology. A coder who can see the next seat has one more reason to build tenure with you.

And weigh what an empty seat costs. AHIMA's 2023 survey release says health information understaffing has led to reduced reimbursement, increased claims denials, lowered patient data quality and slower information releases, with shortages described as notable in revenue cycle management. A slow backfill compounds those losses quietly.

Employer information, not coding, billing-compliance, legal or tax advice. The rules named here belong to the OIG, HHS, CMS, AAPC, AHIMA, ACDIS and the state agencies behind them, and they change. Confirm screening, training, pay and contracting decisions with the agency or body named, and with health-care counsel where the decision is yours.